Warning: Permanently added '[localhost]:49931' (ECDSA) to the list of known hosts. 2024/11/10 09:29:53 fuzzer started 2024/11/10 09:29:54 dialing manager at localhost:46317 syzkaller login: [ 64.094592] cgroup: Unknown subsys name 'net' [ 64.264687] cgroup: Unknown subsys name 'cpuset' [ 64.281054] cgroup: Unknown subsys name 'rlimit' 2024/11/10 09:30:11 syscalls: 215 2024/11/10 09:30:11 code coverage: enabled 2024/11/10 09:30:11 comparison tracing: enabled 2024/11/10 09:30:11 extra coverage: enabled 2024/11/10 09:30:11 setuid sandbox: enabled 2024/11/10 09:30:11 namespace sandbox: enabled 2024/11/10 09:30:11 Android sandbox: enabled 2024/11/10 09:30:11 fault injection: enabled 2024/11/10 09:30:11 leak checking: enabled 2024/11/10 09:30:11 net packet injection: enabled 2024/11/10 09:30:11 net device setup: enabled 2024/11/10 09:30:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/10 09:30:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/10 09:30:11 USB emulation: enabled 2024/11/10 09:30:11 hci packet injection: enabled 2024/11/10 09:30:11 wifi device emulation: enabled 2024/11/10 09:30:11 802.15.4 emulation: enabled 2024/11/10 09:30:11 fetching corpus: 0, signal 0/0 (executing program) 2024/11/10 09:30:12 starting 8 fuzzer processes 09:30:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x2c}}, 0x80) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x8880) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x24, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x30779dc5c0f825cd) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x1c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x804) 09:30:12 executing program 0: io_destroy(0x0) r0 = io_uring_setup(0x284d, &(0x7f0000000000)={0x0, 0x2b1, 0x0, 0x1, 0x228}) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0xfff, r0, &(0x7f0000000080)="b1146b0585091956c1e6e196ec597bf84fd62b1ef50b81f70fe6a281819fbb1b3cb66faade558b0b4c247ca335bbe14985926e2d7b7370f92b2b0593", 0x3c, 0x7f}, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f00000002c0)="7ab037c7031f954199e8941f9d2301e4348e11cac553105eee58a7a4d79c0bc72cd846e88161ee612caadc60b866f6d9290b4f5d6f19bda850a8e6debfe92e1a3544a901b4f030fe6c5b5a1bf0a44df81280377f123e67e5d665a1ad1ff2426be2e42025dfa272255e4dc875df2e4632546571bdbc8fc5b4c2c35ee1", 0x7c, 0x0, 0x0, 0x1}, &(0x7f0000000380)) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="7bc28c542e2907abd9ff0e48c3cc6c5cf50caacfabde370ee54e203717563b42c2b14e1b73f6e10c860a71787286d364529effcb45aa74b989bc4c1908395b6bd705c7f8d696ce48e93621c6cf148b438704139f01c7333108d7817b2ce05cbc30ac630fd6c02638c2ef623f227b7c8d50bc936ec02a42b2ac99769c150c2da0cec2fb081291200591f411e1dac7e64542e7f9dbefb59b4d7fd56ba94a816a6b6fa836bfa01c24c66c1aebefdd0085927bde975df9357aa837acff7acee1602e14d39b194046dc63bb2afc5b6139d7b910a1d777f4312ef47f4d", 0xda, 0x4000004, &(0x7f00000004c0)={0x11, 0x7, 0x0, 0x1, 0x4, 0x6, @random="221fbd000a51"}, 0x14) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) io_getevents(0x0, 0x1, 0x6, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000600)={r4, r5+10000000}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40d1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x5550}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x7c}}, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x855) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000b40), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 09:30:12 executing program 2: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/4096) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001000)=""/249) r0 = msgget(0x2, 0x100) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x400000, 0x0) r1 = msgget(0x1, 0x111) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000001140)=""/177) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000001200)=""/189) socket$packet(0x11, 0xe75c3d43b5c2820c, 0x300) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000001300)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28) openat$bsg(0xffffffffffffff9c, &(0x7f0000001340), 0x402, 0x0) r3 = msgget(0x2, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000001380)=""/4096) r4 = msgget(0x0, 0x304) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002380)=""/95) r5 = msgget(0x3, 0x400) msgctl$IPC_RMID(r5, 0x0) msgsnd(0x0, &(0x7f0000002400)={0x0, "9680781f6401768dacb0a3556c5635bd5f91c90c3f2e3382b44d50c2569761257e7b650863ac72018170ffe9497d9b8ccbf77ccbfde49b9140ca28fb692da7e606e35407528bb6f706da6967025e366b4004953fa3249f0813098deb725837ef8b54c9201914c3bb6e2d64cf17682d11626972f72506d0280c0597876a34119797bacfd0fdde3cb804"}, 0x91, 0x0) [ 82.142924] audit: type=1400 audit(1731231012.728:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:30:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:xen_device_t:s0\x00', 0x22) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x80043) read$snapshot(r2, &(0x7f0000000140)=""/110, 0x6e) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000001c0)) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x400001, 0x0) write$selinux_attr(r2, &(0x7f0000000240)='system_u:object_r:udev_tbl_t:s0\x00', 0x20) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) socketpair(0x11, 0x6, 0x6, &(0x7f00000002c0)) syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x20c40) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x20400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', r5, 0x8000, 0x8, 0x1000, 0x6, {{0x25, 0x4, 0x1, 0x0, 0x94, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0x47, 0x3, 0x1, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@private=0xa010100, 0x10001}]}, @rr={0x7, 0x13, 0x5, [@rand_addr=0x64010100, @loopback, @local, @broadcast]}, @cipso={0x86, 0x1f, 0x1, [{0x0, 0x4, 'De'}, {0x0, 0x8, "f1a61e1c68a3"}, {0x1, 0xd, "5acc0dd4de9b77370e91ee"}]}, @ssrr={0x89, 0x17, 0x6, [@private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) 09:30:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0xffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) r2 = syz_open_dev$sg(&(0x7f0000000180), 0xcd, 0x480300) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000001c0)) getsockopt$inet_udp_int(r0, 0x11, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x22040, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) sendto$packet(r3, &(0x7f0000000300)="1128b7157aab53d5a03ffca93d9ffe69917295d81a62f591a65a72bc4ee0d8e9572822b498c88bf9b40382594fd3ed01165bbca1db4a9805971d0f256cadcb0d408a57ae2680600c396459a8b49061d4b70078aa79ca4d1135a5ea38ffd3101a1a5fdd0a86f6fbde05442d11018c70e4567294fa734d0b7f7a00fb7067310c8e85c69f1cb12db6ad5da73ff1a2fc4226e7bc5561b7ab1630fedbc6d8ea2e9828facaee341176318b57756bc1e1efb68f725965", 0xb3, 0x40004, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x180, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000540)) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x119000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f00000005c0)) 09:30:12 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) sendto$packet(r0, &(0x7f0000000040)="2c5de2a17d04250537af3fd08a6dded1c694e31d8e0fcacf812485f08787dcb49e2c5bc7c21ffb482b8b63a2f37c1761bdee84c7845f95dd60729443", 0x3c, 0x40, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)) r1 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x40, 0x1, 0x1000, 0x6, {{0x29, 0x4, 0x3, 0x2f, 0xa4, 0x65, 0x0, 0xff, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1b, 0xcf, [@broadcast, @multicast1, @private=0xa010100, @broadcast, @private=0xa010101, @local]}, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0xc, [{@loopback, 0x10001}, {@broadcast, 0x80000000}, {@rand_addr=0x64010101, 0x80000000}, {@remote, 0x82}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x200}]}, @end, @timestamp_prespec={0x44, 0x24, 0xd1, 0x3, 0x0, [{@empty, 0x1}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x1c, 0xb9, 0x0, 0x3, [0xe7, 0x6ff, 0xffffffff, 0x80000000, 0x80000000, 0x100]}]}}}}}) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x200, 0x1, {{0x8, 0x4, 0x1, 0x0, 0x20, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ssrr={0x89, 0xb, 0x50, [@rand_addr=0x64010100, @loopback]}]}}}}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000003c0)=r3) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) accept4$packet(r1, 0x0, &(0x7f0000000440), 0x80000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x0, 0x3}) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x90, 0x40000) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000640)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r6 = syz_open_dev$sg(&(0x7f0000000680), 0x7fffffff, 0x305501) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f00000006c0)) 09:30:12 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x400) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) read$snapshot(r2, &(0x7f00000000c0)=""/184, 0xb8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x82800, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) ioctl$SNAPSHOT_FREE(r3, 0x3305) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x200102, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000240)=0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) write$snapshot(r2, &(0x7f0000000280)="2db7bb677e0bc9bfecb8f5da85a6779812dbfb606399e025b78f3cca47fbdcfafea5ee35d6c119", 0x27) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x32e, 0x131580) io_submit(0x0, 0x3, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0xffff, r4, &(0x7f00000002c0)="bb657c332a927f2ac67a0eba707bdc8c9a322e4f6bff66173755404acdf01f1da809faa36d366833493dc2a9cacb393e432093fcbe5f9ad2aefdb64d835031c7a26538a544083b4477902a5fe06e2e85891e3e1eb9254f760b06c9a3b6c7cc66aa1f77f29665787cc87c95848ceb02d1aace7f1680a05c1b226925a5b124da4fb6d6504c2348cb04bf4a0096e7d62c04294125b9dc97a8b6676743b112a5d886c4ab123d97249bfd5157", 0xaa, 0x0, 0x0, 0x3, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xaf, 0xffffffffffffffff, &(0x7f0000000400)="dfe3e9727834b5a9478e4094d4febfd69c231226fa243f4dc0bb20dd6cd1571ce26d1b305756f06c5f2ed9e68d3ac6a6adde847c0db1666f00a48a813c453cf131ac44ed2fbe8e78639fd5ef65f610033eb7414ace58fc18406469e4e46f9c16234cdb5e4514", 0x66, 0x100000000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x20, 0xffffffffffffffff, &(0x7f00000004c0)="702f0af74e034a7d80fcefa32485ba279327a93892fe7eeb5d2537e56b166f882cf56751349c44298f063a6b357f9c18ed73ed36c41fdef225e4fc92caf093879345abef656f4f4b827af10059c57cfcfe5a5a21cc0f33d160c318966b9cd9eb68ccd597f78375c7e628628cac506d610f918e34", 0x74, 0x3, 0x0, 0x2}]) 09:30:12 executing program 7: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x9a, 0x1, 0x2, @mcast2, @local, 0x20, 0xf8f0, 0x7, 0x99c4}}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c6}, 0x3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4860}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x338, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x22}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6a34403741880971a0d668dac514818d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d255163e1fc1dd57f1fdce015a9450c5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ea09a7c91c42efe4b6ad2ffb5cd824e5d373288cc0ca30400b6869b62dea7453"}]}, @NL802154_ATTR_SEC_KEY={0x254, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "616bca17731a47e5540fe7cfd1a94e9535c862eead89cace430a4824b70a8aeb"}, @NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xb43995d8e99d4bd}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8227}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "650acad85e7b8ccd7ceffb3e0238e245"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ee36a903a876bc520b78d8112e44e40dced58b008c50e529e22a21ef7126cc13"}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x8cdb0d164480481a}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "55d93cbab8d0b54fb7b0ab934187eab99bcee8e1291faf44d48c1178900bb684"}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000012}, 0x4004000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x100}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r6) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000bc0)={0x0, @xdp={0x2c, 0xc, r0, 0x26}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1fe0, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)='macvlan1\x00', 0xffffffff, 0x5, 0x5}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008010}, 0x4048850) [ 83.526833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.528458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.530624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.538997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.540913] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.542186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.582709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.587137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.588415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.595086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.609379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.617184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.618652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.623948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.626771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.627716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.631553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.652355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.660548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.663834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.666230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.680577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.682962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.684133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.711960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.714533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.719890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.723669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.752660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.752763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.755076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.756590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.759127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.760269] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.762600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.767480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.777505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.778840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.779893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.833923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.869510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.872556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.902151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.903211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.941051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.989559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.996641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.998047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.613645] Bluetooth: hci0: command tx timeout [ 85.679600] Bluetooth: hci2: command tx timeout [ 85.747348] Bluetooth: hci1: command tx timeout [ 85.805385] Bluetooth: hci7: command tx timeout [ 85.869693] Bluetooth: hci3: command tx timeout [ 85.871278] Bluetooth: hci5: command tx timeout [ 86.061377] Bluetooth: hci6: command tx timeout [ 86.127313] Bluetooth: hci4: command tx timeout [ 87.663307] Bluetooth: hci0: command tx timeout [ 87.726486] Bluetooth: hci2: command tx timeout [ 87.789713] Bluetooth: hci1: command tx timeout [ 87.854501] Bluetooth: hci7: command tx timeout [ 87.919452] Bluetooth: hci3: command tx timeout [ 87.919586] Bluetooth: hci5: command tx timeout [ 88.109319] Bluetooth: hci6: command tx timeout [ 88.175334] Bluetooth: hci4: command tx timeout [ 89.710495] Bluetooth: hci0: command tx timeout [ 89.774503] Bluetooth: hci2: command tx timeout [ 89.838309] Bluetooth: hci1: command tx timeout [ 89.901380] Bluetooth: hci7: command tx timeout [ 89.965548] Bluetooth: hci5: command tx timeout [ 89.966323] Bluetooth: hci3: command tx timeout [ 90.157410] Bluetooth: hci6: command tx timeout [ 90.221329] Bluetooth: hci4: command tx timeout [ 91.757329] Bluetooth: hci0: command tx timeout [ 91.822286] Bluetooth: hci2: command tx timeout [ 91.885459] Bluetooth: hci1: command tx timeout [ 91.949318] Bluetooth: hci7: command tx timeout [ 92.013387] Bluetooth: hci3: command tx timeout [ 92.013402] Bluetooth: hci5: command tx timeout [ 92.205390] Bluetooth: hci6: command tx timeout [ 92.269355] Bluetooth: hci4: command tx timeout [ 146.510951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.512184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.513931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.517303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.520876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.522078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.522847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.525423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.528106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.529171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.530126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.534556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.536766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.539145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.539490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.540064] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.540814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.545691] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.546692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.547718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.551152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.554603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.556689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.558095] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.559520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.561496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.562565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.563993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.566976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.569623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.570833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.583805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.588826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.600295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.605401] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.606664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.607840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.611512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.613071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.614901] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.617048] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.618622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.618650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.619826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.624458] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.631193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.655804] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.663316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.591466] Bluetooth: hci4: command tx timeout [ 148.653463] Bluetooth: hci2: command tx timeout [ 148.654078] Bluetooth: hci3: command tx timeout [ 148.655196] Bluetooth: hci5: command tx timeout [ 148.655818] Bluetooth: hci7: command tx timeout [ 148.717393] Bluetooth: hci6: command tx timeout [ 148.718013] Bluetooth: hci1: command tx timeout [ 148.718102] Bluetooth: hci0: command tx timeout [ 150.638456] Bluetooth: hci4: command tx timeout [ 150.701663] Bluetooth: hci3: command tx timeout [ 150.702332] Bluetooth: hci5: command tx timeout [ 150.702421] Bluetooth: hci7: command tx timeout [ 150.702814] Bluetooth: hci2: command tx timeout [ 150.765820] Bluetooth: hci0: command tx timeout [ 150.766849] Bluetooth: hci6: command tx timeout [ 150.767370] Bluetooth: hci1: command tx timeout [ 152.685549] Bluetooth: hci4: command tx timeout [ 152.750363] Bluetooth: hci2: command tx timeout [ 152.750847] Bluetooth: hci3: command tx timeout [ 152.752077] Bluetooth: hci7: command tx timeout [ 152.752148] Bluetooth: hci5: command tx timeout [ 152.813528] Bluetooth: hci6: command tx timeout [ 152.813664] Bluetooth: hci0: command tx timeout [ 152.814539] Bluetooth: hci1: command tx timeout [ 154.734368] Bluetooth: hci4: command tx timeout [ 154.797418] Bluetooth: hci5: command tx timeout [ 154.798761] Bluetooth: hci3: command tx timeout [ 154.798811] Bluetooth: hci7: command tx timeout [ 154.799215] Bluetooth: hci2: command tx timeout [ 154.861334] Bluetooth: hci1: command tx timeout [ 154.861881] Bluetooth: hci0: command tx timeout [ 154.862400] Bluetooth: hci6: command tx timeout [ 208.579164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.584204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.585204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.591497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.593614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.596500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.597035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.603320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.605824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.607194] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.619909] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.628599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.711077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.726935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.733569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.765106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.777178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.783565] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.792526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.794450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.799926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.817964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.826093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.831546] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.856507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.859197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.864010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.868115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.872019] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.874588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.953923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.958618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.965321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.971979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.978460] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.003454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.012452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.025556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.030764] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.041137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.043982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.049121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.051421] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.062625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.084758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.134397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.142168] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.146138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.670306] Bluetooth: hci1: command tx timeout [ 210.672183] Bluetooth: hci0: command tx timeout [ 210.862276] Bluetooth: hci2: command tx timeout [ 210.925282] Bluetooth: hci3: command tx timeout [ 210.926781] Bluetooth: hci4: command tx timeout [ 211.118291] Bluetooth: hci5: command tx timeout [ 211.120193] Bluetooth: hci6: command tx timeout [ 211.246288] Bluetooth: hci7: command tx timeout [ 212.717353] Bluetooth: hci1: command tx timeout [ 212.717886] Bluetooth: hci0: command tx timeout [ 212.910442] Bluetooth: hci2: command tx timeout [ 212.975247] Bluetooth: hci4: command tx timeout [ 212.975726] Bluetooth: hci3: command tx timeout [ 213.165488] Bluetooth: hci6: command tx timeout [ 213.166064] Bluetooth: hci5: command tx timeout [ 213.295397] Bluetooth: hci7: command tx timeout [ 214.766724] Bluetooth: hci1: command tx timeout [ 214.767389] Bluetooth: hci0: command tx timeout [ 214.958342] Bluetooth: hci2: command tx timeout [ 215.022317] Bluetooth: hci4: command tx timeout [ 215.022900] Bluetooth: hci3: command tx timeout [ 215.215335] Bluetooth: hci6: command tx timeout [ 215.215879] Bluetooth: hci5: command tx timeout [ 215.342320] Bluetooth: hci7: command tx timeout [ 216.813339] Bluetooth: hci1: command tx timeout [ 216.813884] Bluetooth: hci0: command tx timeout [ 217.006301] Bluetooth: hci2: command tx timeout [ 217.069423] Bluetooth: hci4: command tx timeout [ 217.069953] Bluetooth: hci3: command tx timeout [ 217.262509] Bluetooth: hci5: command tx timeout [ 217.263068] Bluetooth: hci6: command tx timeout [ 217.391278] Bluetooth: hci7: command tx timeout [ 270.927544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.930172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.932093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.934590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.936147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.937662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.039831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.041777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.043125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.067450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.071120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.072329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.090858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.094922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.097104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.109043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.110883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.130354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.195447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.203474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.204749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.207817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.212485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.216919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.223573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.232541] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.234055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.242995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.246599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.248019] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.258680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.259966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.298871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.305311] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.318481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.345974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.367369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.368134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.373148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.402084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.403880] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.405016] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.450917] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.454480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.456935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.522764] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.554531] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.560457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.005314] Bluetooth: hci0: command tx timeout [ 273.133880] Bluetooth: hci1: command tx timeout [ 273.198432] Bluetooth: hci2: command tx timeout [ 273.325346] Bluetooth: hci4: command tx timeout [ 273.390391] Bluetooth: hci3: command tx timeout [ 273.519319] Bluetooth: hci6: command tx timeout [ 273.519493] Bluetooth: hci5: command tx timeout [ 273.645850] Bluetooth: hci7: command tx timeout [ 275.061825] Bluetooth: hci0: command tx timeout [ 275.181298] Bluetooth: hci1: command tx timeout [ 275.245279] Bluetooth: hci2: command tx timeout [ 275.374283] Bluetooth: hci4: command tx timeout [ 275.438328] Bluetooth: hci3: command tx timeout [ 275.565434] Bluetooth: hci5: command tx timeout [ 275.566556] Bluetooth: hci6: command tx timeout [ 275.694247] Bluetooth: hci7: command tx timeout [ 277.101302] Bluetooth: hci0: command tx timeout [ 277.229625] Bluetooth: hci1: command tx timeout [ 277.295394] Bluetooth: hci2: command tx timeout [ 277.421448] Bluetooth: hci4: command tx timeout [ 277.490808] Bluetooth: hci3: command tx timeout [ 277.615261] Bluetooth: hci6: command tx timeout [ 277.615368] Bluetooth: hci5: command tx timeout [ 277.749374] Bluetooth: hci7: command tx timeout [ 279.149694] Bluetooth: hci0: command tx timeout [ 279.280277] Bluetooth: hci1: command tx timeout [ 279.341291] Bluetooth: hci2: command tx timeout [ 279.469437] Bluetooth: hci4: command tx timeout [ 279.534351] Bluetooth: hci3: command tx timeout [ 279.661438] Bluetooth: hci6: command tx timeout [ 279.661977] Bluetooth: hci5: command tx timeout [ 279.792629] Bluetooth: hci7: command tx timeout [ 333.366229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.371022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.373017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.403987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.407578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.408872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.446892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.450565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.455416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.465756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.475606] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.479729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.560331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.563885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.568477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.572998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.575883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.578123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.697892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.707936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.710879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.731006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.732846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.740041] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.743406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.760469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.777741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.780778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.782945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.789453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.791373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.793351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.805927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.808001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.811743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.813123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.814564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.818702] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.820465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.826833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.833787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.854933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.855968] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.864413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.867919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.873483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.893915] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.895857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.469586] Bluetooth: hci0: command tx timeout [ 335.535454] Bluetooth: hci1: command tx timeout [ 335.661327] Bluetooth: hci2: command tx timeout [ 335.853560] Bluetooth: hci7: command tx timeout [ 335.854147] Bluetooth: hci3: command tx timeout [ 335.929117] Bluetooth: hci6: command tx timeout [ 335.981336] Bluetooth: hci4: command tx timeout [ 336.046410] Bluetooth: hci5: command tx timeout [ 337.517493] Bluetooth: hci0: command tx timeout [ 337.583225] Bluetooth: hci1: command tx timeout [ 337.709294] Bluetooth: hci2: command tx timeout [ 337.901283] Bluetooth: hci3: command tx timeout [ 337.901498] Bluetooth: hci7: command tx timeout [ 337.966382] Bluetooth: hci6: command tx timeout [ 338.030514] Bluetooth: hci4: command tx timeout [ 338.094298] Bluetooth: hci5: command tx timeout [ 339.568302] Bluetooth: hci0: command tx timeout [ 339.629287] Bluetooth: hci1: command tx timeout [ 339.757272] Bluetooth: hci2: command tx timeout [ 339.949397] Bluetooth: hci7: command tx timeout [ 339.952216] Bluetooth: hci3: command tx timeout [ 340.013398] Bluetooth: hci6: command tx timeout [ 340.079248] Bluetooth: hci4: command tx timeout [ 340.141605] Bluetooth: hci5: command tx timeout [ 341.613359] Bluetooth: hci0: command tx timeout [ 341.677322] Bluetooth: hci1: command tx timeout [ 341.805352] Bluetooth: hci2: command tx timeout [ 341.997294] Bluetooth: hci3: command tx timeout [ 341.997319] Bluetooth: hci7: command tx timeout [ 342.061264] Bluetooth: hci6: command tx timeout [ 342.126258] Bluetooth: hci4: command tx timeout [ 342.189293] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:35:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000008 RCX=ffffffff8115da8f RDX=ffff88803459b700 RSI=ffffffff8115daed RDI=0000000000000007 RBP=0000000015f04420 RSP=ffff8880286a7c70 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=0000000000000008 R11=0000000000000000 R12=0000000000000001 R13=ffff88807ffd76a0 R14=0000000000000000 R15=0000000000000fe0 RIP=ffffffff848390a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc72c4fd540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdfc9dd9f8 CR3=000000002af6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffea00001d5780 RBX=ffffea00001d5780 RCX=ffffffff817ef6de RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea00001d5780 RBP=ffffea00001d5780 RSP=ffff888031ec7ad0 R8 =00007fd8c0e72000 R9 =fffff9400003aaf0 R10=0000000000000000 R11=00000000000c36d9 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea00001d5798 RIP=ffffffff818baf62 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8c0e6b820 CR3=000000002e162000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000